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IN THE CLAIMS 
Please amend the claims as follows: 
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1 . (Currently Amended) In a computer system, a method comprising: 

receiving a page comprising content including one or more elements having active 
content; and 

controlling page output and any action s corresponding to at least part of the content by: 

1) int e rpr e ting disabling or enabling execution of a first script or loading of a first 
control corresponding to at least one part of the page based on a first set of security 
settings , th e first s e t of security s e ttings being bas e d on an id e ntifi e r indicating a sourc e 
from which th e pag e is obtain e d ; and 

2) interpreting disabling or enabling execution of a second script or loading of a 
second control corresponding to at least one other part of the page based on a second set 
of security settings associat e d with an e l e m e nt of th e pag e, the second set of security 
settings being different from the first set of security settings . 

2. (Original) The method of claim 1, wherein receiving the page includes accessing data 
received from a remote source. 

3. (Original) The method of claim 1, wherein receiving the page includes accessing data 
received from a cache. 

4. (Currently Amended) The method of claim 1, wherein a first action including one of 
execution of the first script or the loading of the first control is requested in the content in the at 
least one part of the page int e rpret e d with th e first s e t of s e curity s e ttings , wherein a second 
action that is similar to the first action including one of execution of the second script or the 
loading of the second control is requested in the content in the at least one other part of the page 
int e rpr e t e d with th e s e cond s e t of s e curity s e ttings , and wherein controlling page output and a«y 
actions comprises, allowing the first action and disallowing the second action. 



AMENDMENT FILED WITH RCE 

Serial Number: 10/047,302 

Filing Date: January 14, 2002 



Page 3 

Dkt: 174380.01 



5. (Currently Amended) The method of claim 4 wherein the first action corresponds to a 
command to run [[a]] the first set-ef script, and wherein the second action corresponds to a 
command to run [[a]] the second set-ef script. 

6. (Currently Amended) The method of claim 4 wherein the first action further corresponds 
to a command to download a first set of data, and wherein the second action corresponds to a 
command to download a second set of data. 

7. (Currently Amended) The method of claim 4 wherein allowing the first action 
comprises, prompting a user for a decision and receiving a response indicating that the first 
action is allowed. 

8. (Currently Amended) The method of claim 4 wherein disallowing the second action 
comprises, prompting a user for a decision and receiving a response indicating that the second 
action is not allowed. 

9. (Currently Amended) The method of claim 1, wherein a first action including one of 
execution of the first script or loading of the first control is requested in the content in the at least 
one part of the page interpr e t e d with the first sot of s e curity s e ttings , wherein a second action that 
is similar to the first action including one of execution of the second script or loading of the 
second control is requested in the content in the at least one other part of the page interpr e t e d 
with th e second s e t of security s e ttings , and wherein controlling page output and any actions 
comprises, disallowing the first action and allowing the second action. 

10. (Currently Amended) The method of claim 1 wher e in interpr e ting at l e ast on e part of th e 
png ft based on a first s e t of s e curity settings compris e s, further comprising: 

retrieving the first set of security settings based on the an identifier indicating a source 
from which the page is obtained , and associating the first set of security settings with the at least 
one part of the page. 
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1 1 . (Previously Presented) The method of claim 10 further comprising, constructing a tree to 
represent the page, and wherein associating the first set of security settings with the at least one 
part of the page includes storing data corresponding to the first set of security settings at a node 
in the tree. 



12. (Currently Amended) The method of claim 1 wher e in th e int e rpr e ting at least one oth e r 
part of th e pag e bas e d on a se cond s e t of s e curity s e ttings compri ses , further comprising: 

recognizing security data associated with the an element of the page , and associating the 
second set of security settings with the at least one other part of the page based on the security 
data. 

13. (Previously Presented) The method of claim 12 further comprising, constructing a tree to 
represent the page, and wherein associating the second set of security settings with the at least 
one other part of the page includes storing data corresponding to the second set of security 
settings at a node in the tree that corresponds to the element. 

14. (Currently Amended) The method of claim 13 wherein storing data corresponding to the 
second set of security settings comprises negotiating the second set of security settings. 

15. (Previously Presented) The method of claim 14 wherein negotiating the second set of 
security settings comprises inheriting at least one setting in the second set of security settings 
based on security information associated with a parent node in the tree. 

16. (Previously Presented) The method of claim 14 wherein negotiating the second set of 
settings comprises receiving at least one setting in the second set of security settings based on 
security information associated with a child node in the tree. 

17. (Currently Amended) The method of claim 1, wherein controlling page output and any 
actions further comprises, accessing privacy settings. 
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18. (Original) A computer-readable medium having computer-executable-instructions for 
performing the method of claim 1 . 

19-25 (Canceled). 

26. (Currently Amended) In a computer connected to a network, a system comprising: 
browser software that interprets content received from the network, and 

a security mechanism that associates a first security zone with a first part of the content 
and associates a second security zone with a second part of the content, the security mechanism 
being further operable to associate a first set of security settings with the first part of the content 
based on the first security zone, and associate a second set of security settings with the second 
part of the content based on the second security zone, the second set of security settings being 
different from the first set of security settings, whether execution of a first script or loading of a 
first control corresponding to the first part of the content is permitted being based on the first set 
of security settings, and wherein whether execution of a second script or loading of a second 
control corresponding to the second part of the content is permitted being based on the second set 
of security settings 

the s e curity m e chanism associates at l e a s t on e of the first s e curity zon e with th e first part 
of th e cont e nt or th e s e cond s e curity zon e with th e second part of th e cont e nt bas e d on an 
identifi e r indicating a source on th e n e twork or th e computer from which the first part of the 
cont e nt or th e second part of th e cont e nt is obtain e d . 

27. (Original) The system of claim 26 further comprising, a negotiator that controls the 
second set of security settings. 

28. (Original) The system of claim 27 wherein the negotiator controls the second set of 
security settings relative to the first set of security settings. 

29. (Original) The system of claim 28 wherein the negotiator controls the second set of 
security settings relative to the first set of security settings by having at least one setting in the 
second set be inherited from a corresponding setting in the first set. 
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30. (Currently Amended) The system of claim 26 wherein the indicator indicat e s a w e bsit e 
on the n e twork or a file on th e comput e r first set of security settings is based on a network 
identifier of a source of the content . 

31. (Canceled). 

32. (Original) The system of claim 26 wherein the second part of the content corresponds to 
an element in the content. 

33. (Original) The system of claim 32, further comprising a component that detects security 
data associated with the element. 

34. (Original) The system of claim 33 wherein the security data associated with the element 
comprises, a reference to a security zone. 

35. (Original) The system of claim 33 wherein the security data associated with the element 
comprises, a reference to a file. 

36. (Original) The system of claim 33 wherein the security data associated with the element 
comprises, a reference to a source of remote data. 

37. (Original) The system of claim 33 wherein the security data associated with the element 
comprises a string of data corresponding to at least some of the security settings. 



38. (Original) The system of claim 33 wherein the security data associated with the element 
comprises information indicating that the security settings should be determined relative to other 
security settings. 
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39. (Original) The system of claim 26 further comprising, a tree of nodes constructed from 
the content, the tree including a first node corresponding to the first part and a second node 
corresponding to the second part. 

40. (Original) The system of claim 39 further comprising, a negotiator that controls the 
second set of security settings. 

4 1 . (Previously Presented) The system of claim 40 wherein the negotiator evaluates the 
second set of security settings. 

42. (Previously Presented) The system of claim 40 wherein the negotiator changes at least 
one setting in the second set of security settings based on a rule. 

43. (Original) The system of claim 39 further comprising, at least one other node in the tree 
that is associated with security settings based on inheriting information from a parent node. 

44. (Original) The system of claim 43 wherein the parent node comprises the first node. 

45. (Original) The system of claim 43 wherein the parent node comprises the second node. 

46. (Original) The system of claim 39 further comprising, at least one other node in the tree 
that is associated with security settings based on security data of a child node. 

47. (Original) The system of claim 26 wherein the second part of the content corresponds to 
a frame tag in the content. 

48. (Previously Presented) The system of claim 26 wherein the content comprises a 
HyperText Markup Language page. 



49-54. (Canceled). 
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55. (Currently Amended) A markup language document, comprising: 

a first set of content associated with a first set of security settings, the first set of security 
settings b e ing bas e d on an id e ntifier indicating a sourc e on a network or a local comput e r from 
which th e first s e t of cont e nt is obtain e d indicating whether execution of a first script or loading 
of a first control corresponding to the first set of content is permitted ; and 

a second set of content associated with a second set of security settings, the second set of 
security settings being different from the first set of security settings , and the second set of 
security settings indicating whether execution of a second script or loading of a second control 
corresponding to the second set of content is permitted . 

56. (Original) The markup language document of claim 55 wherein the first set of content 
corresponds to a page, the second set of content is included in the page, and wherein the second 
set of security settings take precedence over the first set of security settings with respect to 
determining security for the second set of content. 

57. (Original) The markup language document of claim 55 wherein the first set of content 
corresponds to a page and the second set of content corresponds to a frame element included in 
the page. 

58-59 (Canceled). 

60. (Original) The markup language document of claim 55, wherein the markup language 
document includes a reference to a file that corresponds to at least some of the second set of 
security settings. 



61 . (Original) The markup language document of claim 55, wherein the markup language 
document includes a reference to a source of remote data that corresponds to at least some of the 
second set of security settings. 
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62. (Original) The markup language document of claim 55, wherein the markup language 
document includes a string of data that corresponds to at least some of the second set of security 
settings. 



63. (Original) The markup language document of claim 55, wherein the markup language 
document includes information indicating that at least some of the second set of security settings 
should be determined relative to other security settings. 



